MAL-2025-150101 Malicious code in @mipta1/koffgxad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806cbce799b16346e474d27e47ce9966e4d840a824f58bfdbaee07bb418dde99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152406 Malicious code in alita-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b91f11122d05cfeb0f0a2145bdf5126a17b49ebea9179fa5516134717cce627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168795 Malicious code in tealoveness65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aeae99b37fffd4839851c725a48414d92335588bb418fde6c953791598d501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160421 Malicious code in milaoa-dudio-nsastuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc521ce502d8cd92683d3124e27792831156421118f88df1279a4af6b186688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154781 Malicious code in ewa-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a686f235c798c3b253b65ca17e5c789c58a880fa31dd15360ac6784bb14aa6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166410 Malicious code in sunderlan-ud-vakumanaakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6daa7d85c115c976e3d65434d6f3355160cde324f4e85e4ff71756a3aa5d4f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165648 Malicious code in saku-aiu-unian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82f343cb5a6131970dc9c147c702aad678f65e10a84976ef74b835a324f519d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158949 Malicious code in madan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba38d4c8dfc78ab651908b5e03811d27c278b8c7225e7e276666e91693c3bddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163299 Malicious code in nokire-rara13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3173a3bc880af3652bd0943136db29c1d22e3c252c45089e7c8d9ca58f0a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152447 Malicious code in alvira-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42600b321a0176c922397674eb2572792bf3fc69585924c2a128124ea7c0f270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158841 Malicious code in lookingan-namalaka30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2861283b509524712a834b159715912074a962171a410b8a8782e2c2459b81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161801 Malicious code in namae-nadugsua-mitosia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b542777fbb97596998d429e2a57d58ce47fe2c18f15186552a234264ae1d8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167865 Malicious code in teagood-yakuna104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b26da87bd705b92797975497d0b2da3efbe6ca272e765b23c9ece110370d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160372 Malicious code in messi-turda-buysad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563c82d2f777de6119a4e5adfe1c5f20506e09f758ec7f46190421266a5318c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164101 Malicious code in pilau-akaviu-kionupalabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8e24da9d51bd0de3f5609702fa46b9229c8dcd674328389d61ab074b1e86af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168100 Malicious code in tealove-aruma43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb33e86fcd42a51356ae19478da434fd5cd4da0bbe0993bf342dd164a6d2b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169526 Malicious code in uaragifa-afiat-usutafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9eda0251f83541237cdadc9c6b551c81bca89359d83c1ab57e55a366cee22ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155878 Malicious code in ican-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6588a7d7a4ef0ef8b6ac841453270875638f2bfa2af91e30c3f8e32640ca34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e823a6979eee89c8247fdfb2fa898fb990dec91de31c1aec33c4e6dd19d97e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167820 Malicious code in teagood-sukuna64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624fadbd9b988d563fe35233bef99eea8be51f7d9089c1a11a0776ba178d5550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...